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The MAILING DATE of this communication appears on the cover sheet with the correspondence address 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 

- Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )K Responsive to communication(s) filed on 29 November 2000 . 
2a)D This action is FINAL. 2b)^ This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 
Disposition of Claims 

4) [3 Claim(s) 1-40 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) K Claim(s) 1-40 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) 0 The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 

1 1) D The proposed drawing correction filed on is: a)0 approved b)D disapproved by the Examiner. 

If approved, corrected drawings are required in reply to this Office action. 

12) D The oath or declaration is objected to by the Examiner. 
Pri rity under 35 U.S.C. §§119 and 120 

13) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 

a)D All b)D Some*c)D None of: 

1 0 Certified copies of the priority documents have been received. 

2.Q Certified copies of the priority documents have been received in Application No. . 

30 Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 

14) ^ Acknowledgment is made of a claim for domestic priority under 35 U.S.C. § 1 19(e) (to a provisional application). 

a) D The translation of the foreign language provisional application has been received. 

1 5) Q Acknowledgment is made of a claim for domestic priority under 35 U.S.C. §§ 1 20 and/or 121. 
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1) ^ Notice of References Cited (PTO-892) 4) □ Interview Summary (PTO-413) Paper No(s). . 
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DETAILED ACTION 
Examiner's Note 

1 . The Examiner has pointed out particular references contained in the prior art of record in the body 
of this action for the convenience of the Applicant. Although the specified citations are representative of 
the teachings in the art and are applied to the specific limitations within the individual claims, other 
passages and figures apply as well. It is requested from the Applicant, in preparing the response, to 
consider fully the entire references as well as the context of all references passages as potentially 
teaching all or part of the claimed inventions. 

Claim Rejections - 35 USC § 103 

2. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness 
rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

3. Claims 1-40 are rejected under 35 U.S.C. 103(a) as being unpatentable over Bains et a/ .. US 
Patent 5,579,222 in view of Ginter et a/. . US Patent 5,892,900. 

As per claims 1 and 17 . 

Bains describes a system for administering license compliance on a network (Abstract; Summary 
of the Invention; Fig 1, associated text). Ginter discloses a Virtual Distribution Environment (VDE) wherein 
a license compliance verification system may be set up to monitor the use of licensed property and 
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gathers data on the use of this property (Abstract; Background and Summary of the Invention(s); Figs 1- 
5B; 77-79; 85-87; associated text). 

Neither Bains nor Ginter specifically describes all the limitations recited in claims 1 and 17. 
However it would have been obvious to one ordinarily skilled in the art at the time the invention was made 
to have combined the features taught by Bains and Ginter to arrive at a license compliance system and 
method meeting all the limitations of these claims, in order to provide a trusted, secure, and tamper free 
license monitoring system for use by licensors, thus making software licensors/publishers more attracted 
to offering their products to user organizations: 

A license compliance verification [system and method], comprising: a license manager that 
internally monitors use of licensed property (Baines: above citations; Ginter: Fig 86, associated text; 
C339-342: "Example-Distribution of Content Control Information Within an Organization"), intended to be 
used by licensed users, and gathers data on the usage of the licensed property including by reference to 
a plurality of licensors of the license property; and monitoring software that interfaces with the license 
manager and extracts from it licensor-specific data and authenticates (Ginter: C21 , L41 - C22, L25) the 
retrieved data such that licensors are assured, based on a set of rules, that data gathered by the license 
manager has not been altered or improperly deleted prior to its being provided to licensors. 

As per claims 2 and 18 . 

Bains in view of Ginter disclose all the limitations of claims 1 and 17, respectively. 
Both Bains and Ginter further disclose: 

... the licensed property comprises computer software (Bains: Abstract; Ginter: C4, L14-27). 
As per claims 3 and 19 . 

Bains in view of Ginter disclose all the limitations of claims 1 and 17, respectively. 

Bains further discloses that an encrypted log file of license usage will be maintained (Bains: Fig 2, 
associated text). Neither Bains nor Ginter specifically discloses that the users will be able to review log 
data. However it would have been obvious to one ordinarily skilled in the art at the time the invention was 
made to have made the data viewable by users, so that they can themselves review how much usage 
they've incurred, while providing for tamper-proof recording of the same data, so that licensors will trust 
that the license monitor is providing accurate logs. Such a system would meet all the limitations recited in 
claims 3 and 19: 
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... the monitoring software includes a facility that enables users to review data before it is sent to 
licensors and prevents users from modifying such data. 

As per claims 4 and 20 . 

Bains in view of Ginter disclose all the limitations of claims 1 and 17, respectively. 

Both Bains and Ginter further describe using passwords and certificates for authorizing licenses 
(Bains: C1, "Background Art", L39-40; Ginter: C8, L1-7; C210, L49-58]. Therefore it would have been 
obvious to one ordinarily skilled in the art at the time the invention was made to have incorporated the use 
of passwords and certificates to authorize usage of licensed property, to provide trusted communications: 

...the license manager includes a facility that accepts passwords and license certificates for 
authorizing usage of respective ones of the licensed property. 

As per claims 5 and 21 . 

Bains in view of Ginter disclose all the limitations of claims 1 and 17, respectively. 

Neither reference specifically discloses gathering out-of-compliance data. However Bains does 
disclose that his license monitoring system would log all instances of license requests (Bains, Figs 1-2, 
associated text). Therefore a system set up according to the teachings of Bains and Ginter combined 
would inherently save all instances of out-of-compliance license requests as well. This would be a useful 
feature to allow licensors/administrators to analyze usage trends and adjust license policies accordingly: 

...the gathered data comprises out-of-compliance data. 

As per claims 6 and 22 . 

Bains in view of Ginter disclose all the limitations of claims 1 and 17, respectively. 

Ginter further discloses that certificates that have been decommissioned should be recognized 
and used to prevent licensing of users/sites with such expired certificates (Ginter: C210, L59 - C21 1 , 
L17). 

Therefore it would have been obvious to one ordinarily skilled in the art at the time the invention 
was made to have incorporated the maintenance of a certification modification database, to ensure that 
only authorized current certificate holders would have access to the data.; a record of such modification 
data would also allow better management of content delivery and planning: 
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...the gathered data comprises license certificate modification data. 
As per claims 7 and 23 . 

Bains in view of Ginter disclose all the limitations of claims 1 and 17, respectively. 

Ginter further discloses that creators/licensors may directly provide or modify instructions to the 
monitoring software (Ginter: C339-342: "Example-Distribution of Content Control Information Within an 
Organization"). It would have been obvious to one ordinarily skilled in the art at the time the invention was 
made to add this feature in order to immediately implement changes to the license monitoring process, 
rather than wait for a regular timed update of the licensing monitor: 

...the monitoring software includes a facility that enables licensors to directly and remotely 
provides instructions to the monitoring software. 

As per claims 8 and 24 . 

Bains in view of Ginter disclose all the limitations of claims 1 and 23, respectively. 

Both Bains and Ginter disclose that monitoring agents may be run on a user's computer (Bains: 
Fig 1 , associated text; Ginter: C6. L14-28). 

Therefore it would have been obvious to one ordinarily skilled in the art at the time the invention 
was made to have incorporated this feature as taught by both references, in order to provide automated 
monitoring, thus negating the need for licensors to manually intervene in the process: 

... direct access to the monitoring software is granted to an agent operating on behalf of a 
licensor but which is active on a user's computer. 

As per claims 9 and 25 . 

Bains in view of Ginter disclose all the limitations of claims 1 and 17, respectively. 

Both references disclose that multiple products may be licensed and monitored accordingly 
(Bains: Fig 1, associated text; Ginter: Fig 86, associated text). Therefore it would have been obvious for 
one ordinarily skilled in the art at the time the invention was made to have usage data gathered based on 
the ID of each product and/or licensor monitored, in order to provide a clear view of which product was 
being used, how, and when: 
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. . .further including an operator control facility that enables controlling the monitoring software to 
carry out a data gathering task based on selection criteria and the selection criteria includes at least 
identification of products or licensors. 

As per claims 10 and 26 . 

Bains in view of Ginter disclose all the limitations of claims 1 and 17, respectively. 

Bains further discloses the capability of his system to periodically communicate with a license 
server (Bains: C7, L42-50). Bains teaches that an automated reporting system may be set up, wherein 
data can be forwarded to a license server or licensor, based on a periodic timer. It would have been 
obvious for one ordinarily skilled in the art at the time the invention was made to include this monitoring 
operation, in order to automatically provide current, up-to-date license usage, so as to allow for rapid 
changes/additions to the licensing rules: 

... the monitoring software is operable on a time scheduling basis. 

As per claims 11 and 27 . 

Bains in view of Ginter disclose all the limitations of claims 1 and 17, respectively. 

Ginter further discloses that his system may use symmetric key encryption (Ginter: C66-67: "SPU 
Encrypt/Decrypt Engine"). Therefore it would have been obvious for one ordinarily skilled in the art at the 
time the invention was made to include this common and inexpensive encryption technique for securing 
the communications from the monitor to the licensor: 

... including a facility for creating a new symmetric encryption key for encrypting the data to be 
transferred to licensors. 

As per claims 12 and 28 . 

Bains in view of Ginter disclose all the limitations of claims 1 1 and 27, respectively. 

Ginter further discloses that a preferred embodiment of his system will use an additional 
asymmetric encryption method, using public/private encryption keys for stronger protection of data and 
transmissions (Ginter: same citation as above). It would have been obvious for one ordinarily skilled in the 
art at the time the invention was made to make this further encryption available, where the need for 
securing transmissions from the monitor to the licensor is more significant: 
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... a facility that encrypts the symmetric encryption key using a public key of a licensor. 
As per claims 13 and 29 . 

Bains in view of Ginter disclose all the limitations of claims 1 1 and 27, respectively. 

As cited and analyzed above, Ginter further teaches that transmissions from each participant may 
benefit from an asymmetric encryption protocol on top of a symmetric one. It would have been obvious for 
one ordinarily skilled in the art at the time the invention was made to make this further encryption 
available, this time using the user's public key, so that transmissions from the user can be securely and 
uniquely authenticated: 

...including a facility that encrypts the symmetric encryption key using a public key of a user. 
As per claims 14 and 30 . 

Bains in view of Ginter disclose all the limitations of claims 1 and 17, respectively. 

Both Bains and Ginter further disclose using encryption to secure data, including license data 
(see all above citations; Bains: Fig 1-2, associated text). It would have been obvious for one ordinarily 
skilled in the art at the time the invention was made to make this feature available, in order to ensure the 
security of the data file to be transmitted to the licensor: 

. . . further including an authenticating facility which is operable as a part of the monitoring 
software and which authenticates data that is gathered for a licensor, to prevent tampering with such 
data. 

As per claims 15 and 31 . 

Bains in view of Ginter disclose all the limitations of claims 14 and 30, respectively. 

Ginter further discloses using a hash method for further encrypting data transmissions (Ginter: 
Col 131 : "SPE secure database manager"). It would have been obvious for one ordinarily skilled in the 
art at the time the invention was made to further implement this teaching from Ginter, in order to provide 
even stronger encryption of the licensing data. An embodiment of such a system would meet all the 
further limitations of claims 1 5 and 31 : 

...the authentication comprises a message digest and the message digest is a data digest 
selected from the group consisting of a hash value or an arithmetic total computed from encrypted data 
which is then encrypted using a private key specific to the monitoring software. 
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As per claims 16 and 32 . 

Bains in view of Ginter disclose all the limitations of claims 1 and 17, respectively. 

Ginter further discloses that many different types of digital properties may benefit from his system 
(see Ginter citations above): It would have been obvious for one ordinarily skilled in the art at the time the 
invention was made to apply this licensing monitoring to all types of digital properties that may be used or 
accessed by multiple users, so that accurate accounting of their use may be monitored: 

... the licensed property is selected from a property group consisting of: licensed software, trade 
secrets, copyrighted music, copyrighted books, copyrighted photos, copyrighted movies, and copyrighted 
videos. 

As per claims 33 and 34 . 

Bains in view of Ginter disclose all the limitations of claims 28 and 12, respectively 
As cited and analyzed above, Ginter further teaches that transmissions from each participant may 
further benefit from multiple encryption protocols using asymmetric and symmetric algorithms performed 
on various unique items including a user's cryptographic public key. It would have been obvious for one 
ordinarily skilled in the art at the time the invention was made to apply these stronger encryption methods 
when a very high degree of security is desired: 

...further including encrypting the symmetric encryption key which has been encrypted using the 
public key of the licensor, with a user's public key and subsequently providing such twice encrypted 
information to a respective user. 

As per claims 35 and 38 . 

Bains in view of Ginter disclose all the limitations of claims 1 and 17, respectively. 

Ginter further discloses the use of clearinghouses in his system (Ginter: Col 3, L25-30; Fig 77, 
associated text). Therefore it would have been obvious for one ordinarily skilled in the art at the time the 
invention was made to further implement this teaching from Ginter, in order to provide an independent, 
central service for billing and accounting based on license usage for many different products: 

...further including a central clearinghouse facility, the monitoring software accumulating licensor- 
specific data pertaining to a plurality of licensors and transmitting the same to the central clearinghouse 
facility, the clearinghouse facility consolidating, sorting and providing the licensor-specific data according 
to licensors. 

As per claims 36 and 39 . 
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Bains in view of Ginter disclose all the limitations of claims 35 and 38, respectively. 

Using the same motivation analysis cited for claims 8, 24 and 10, 26 above, further setting up an 
automated process for providing licensing data from monitor software to clearinghouse would be obvious 
to one ordinarily skilled in the art at the time the invention was made: 

...the monitoring software and the central clearinghouse facility interact with each other 
automatically. 

As per claims 37 and 40 . 

Bains in view of Ginter disclose all the limitations of claims 35 and 38, respectively. 

Using the same motivation analysis cited for claims 7 and 23 above, further setting up a process 
for directly accessing the licensing monitoring and prompting it to provide data or to modify license 
policies would be obvious to one ordinarily skilled in the art at the time the invention was made: 

... the monitoring software and the central clearinghouse facility interact with each other in 
response to prompting by specific licensors. 



Any inquiry concerning this communication or earlier communications from the examiner should 
be directed to David Q Le whose telephone number is 703-305-4567. The examiner can normally be 
reached on 8:30am-5:30pm Mo-Fri. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
James P Trammell can be reached on 703-305-9768. The fax phone numbers for the organization where 
this application or proceeding is assigned are 703-746-8494 for regular communications and 703-746- 
8494 for After Final communications. 

Any inquiry of a general nature or relating to the status of this application or proceeding should be 
directed to the receptionist whose telephone number is 703-308-1 113. 



Conclusion 



March 24, 2003 



DQL 




